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(54) Validation stamps for electronic signatures 

(57) The present invention describes a validation 
stamp for protecting the integrity of a signature affixed 
to an electronic document. The validation stamp of the 
present invention includes a validation body and a vali- 
dation signature. The validation stamp is affixed to a 
signed document having a document body and a docu- 
ment signature. The document signature and the vali- 
dation signature are derived from an electronic signa- 
ture defined by geometric arid timing information. Spe- 
cifically, the validation signature includes the timing in- 
formation, and possibly the geometric information, of the 
electronic signature, whereas the document signature 
includes the geometric information, and not the timing 
information, of the electronic signature. To verify the in- 
tegrity of the signature on the electronic document, the 
validation signature is first decrypted and then com-' 
pared, along with the document signature, against the 
signed document and geometric and timing information 
of a signature known for the authorized signator of the 
electronic document. 
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FIELD OF THE INVENTION 

The present invention relates generally to the field 
of electronic documents and, more particularly, to sig- 
nature verification on electronic documents. 

BACKGROUND OF THE INVENTION 

In certain instances, office work productivity has 
significantly increased through advances in technology 
Some of these advances in technology involve replacing 
paper documents in the workplace with electronic doc- 
uments. One such advance provides office workers with 
the ability to send/receive and share documents elec- 
tronically. Traditionally, many paper documents contain 
signatures to show authorship or indicate approval. Ac- 
cordingly, ills also desirable to include signatures in the 
electronic documents, particularly when they are sent 
back and forth. As would understood, the inclusion of 
signatures in the electronic documents is easily 
achieved using graphic tablets, for example, which are 
computer peripheral devices for capturing handwritten 
data. 

Once a signature is affixed to a document, people 
generally assume that the signature on a paper or elec- 
tronic document is proof of authorship or approval. 
There is no guarantee, however, that the integrity of the 
signature, especially electronic ones, has not been com- 
promised, for example, by being traced or otherwise 
forged. Generally, signatures on paper or electronic 
documents are vulnerable to two forms of deception. 
The first form of deception involves an invalid signature. 
An invalid signature is a signature created by a forger 
attempting to imitate the signature of another person, I. 
e., authorized signator. Such a signature is affixed on a 
document not authored or approved by the authorized 
signator. The second form of deception involves affixing 
a valid signature, which is a signature actually created 
by the authorized signator, on a document other than 
the original intended document. This form of deception, 
referred to herein as an invalid copy, is particularly dif- 
ficult to detect when the signature has been "cut" from 
one electronic document and "pasted" onto a second 
electronic document since it looks exactly like the orig- 
inal signature. 

For the aforementioned reasons, a number of peo- 
ple have reservations about allowing their signature to 
be captured electronically. Accordingly, there exists a 
need for protecting the integrity of a signature on an 
electronic document. 

Summary of the Invention 

A validation stamp is provided for protecting the in- 
tegrity of an electronic signature on a document, where- 
in said document Includes a document body and a doc- 



ument signature, said^ocument signature including ge- 
ometric information corresponding to said electronic sig- 
nature, said validation stamp comprising: a validation 
signature including timing information corresponding to 
s said electronic signature for ensuring that said electron- 
ic signature is a valid signature; and a validation body 
identical to at least a portion of said document body for 
determining whether said electronic signature was orig- 
inally intended for said document. 
10 The validation signature may be encrypted such 
that said timing information Is concealed from recipients 
of said document. The validation signature may be de- 
cryptable for comparing said timing information of said 
validation signature against timing information known 
IS for an authorized signator of said electronic signature. 

The validation signature may further include said 
geometric information corresponding to said electronic 
signature. The validation signature may be decryptable 
for comparing said timing information and said geomet- 
20 ric information of said validation signature against timing 
Information and geometric information known for an au- 
thorized signator of said electronic signature. The vali- 
dation body may be Identical to the entire contents of 
said document body. Alternatively, it may be Identical to 
2S predetermined portions of said document body. 

The validation body may be operable for comparing 
against said document body. 

The validation stamp may further comprise a docu- 
ment signature including geometric information corre- 
sponding to said electronic signature which has been 
modified such that said timing information correspond- 
ing to said electronic signature cannot be reconstructed 
from modified geometric information. The geometric In- 
formation may be modified such that adjacent points 
comprised in said modified geometric information are 
equal arc-length distances from each other. Alternative- 
ly, the geometric information may be modified such that 
a random number of chosen points are interpolated be- 
tween adjacent points comprised in said geometric in- 
40 formation. 

A method for protecting an electronic signature af- 
fixed to an electronic document comprises the steps of: 
creating a signed document having a document body 
and a document signature: and assembling a validation 
45 stamp for said signed document, wherein said validation 
stamp includes a validation signature and a validation 
body. 

The method may comprise the additional step of ap- 
pending said validation stamp to said signed document, 

50 wherein said validation stamp may be referenced to pro- 
tect the Integrity of said electronic signature on said 
electronic document. 

The document signature may include geometric in- 
formation describing geometric signature features of a 

55 signator of said electronic signature. The geometric in- 
formation may be modified such that timing information 
corresponding to said geometric information cannot be 
reconstructed from modified geometric information. The 
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modified geometric information may include adjacent 
points which are equal arc-length distances from each 
other. Alternatively the modified geometric information 
may include a random number of chosen points inter- 
polated between adjacent points comprised in unmodi- 
fied geometric information. 

The method may include the additional step of; 
comparing said validation body against said document 
body to determine whether said electronic signature 
■ was originally intended by an authorized signator to be 
affixed to said electronic document. 

The method may include the additional step of: 
corhparing geometric information and timing information 
contained within said signed document and said valida- 
tion stamp against geometric information and timing in- 
formation of a signature known for an authorized signa- 
tor to determine whether said signature is a valid signa- 
ture. 

The validation signature may include geometric in- 
formation describing geometric signature features of a 
signator of said electronic signature and timing informa- 
tion describing dynamic signature features of said sig- 
nator of said electronic signature. 

The method may include the additional step of cap- 
turing a signature electronically using a graphics tablet 
operable to record positions of a writing device on said 
graphics tablet at given times. The step of creating said 
signed document may include deriving said document 
signature using geometric information of said electronic 
signature being captured electronically by said graphics 
tablet. The step of creating said signed document may 
include deriving said validation stamp using timing in- 
formation of said electronic signature being captured 
electronically by said graphics tablet. 

The method may include the additional step of en- 
coding said validation stamp such that said validation 
stamp is not accessible to recipients of said electronic 
document. 

The validation body may be identical to said docu- 
ment body such that said validation body may be later 
compared to said document body for determining 
whether said electronic signature was originally intend-, 
ed by ah authorized signator to be affixed to said elec- 
tronic document. Alternatively, the validation body may 
be identical to predetermined portions of said document 
body such that said validation body may be later com- 
pared to said document body for determining whether 
said electronic signature was originally intended by an 
authorized signator to be affixed to said electronic doc- 
ument. 

The validation signature may include timing infor- 
mation describing dynamic signature features of a sig- 
nator of said electronic signature. 

The validation stamp may include a validation 
number identifiable with a signator to protect against de- 
ception. 

A method for verifying the integrity of an electronic 
signature on an electronic document having a signed 



document and an encrypted validation stamp, compris- 
es the steps of: decrypting said validation stamp; and 
comparing said validation stamp being decrypted 
against said signed document to determine whether 
s said electronic signature was originally intended by an 
authorized signator to be affixed to said electronic doc-, 
ument. 

The signed document may include a document 
body, said validation stamp may Include a validation 

?o body, and said step of comparing said validation stamp 
may include comparing said validation body against 
said document body to determine whether said valida- 
tion body coincides with said document body. 

The signed document may include said document 

IS signature, said validation stamp may include a valida- 
tion signature and said method may include the addi- 
tional step of comparing timing information of said vali- 
dation signature and geometric information of said doc- 
ument signature against geometric information and tim- 

20 ing information of a signature known for an authorized 
signator to determine whether said electronic signature 
is a valid signature. 

The validation stamp may include a validation sig- 
nature and said method may include the additional step 

25 of comparing geometric information and timing informa- 
tion of said validation signature against geometric infor- 
mation and timing information of a signature known for 
an authorized signator to determine whether said elec- 
tronic signature is a valid signature. 

30 A method for verifying the integrity of an electronic 
signature on an electronic document having a signed 
document and an encrypted validation signature, com- 
prises the steps of: decrypting said validation signature; 
. and comparing said validation signature being decrypt- 

35 ed against timing information of a signature known for 
an authorized signator of said signed document to de- 
termine whether said validation signature is a valid sig- 
nature. 

The method may include the additional step of com- 

40 paring said validation signature being decrypted against 
geometric information of a signature known for an au- 
thorized signator of said signed document to determine 
whether said validation signature is a valid signature. 
The signed documenfmay include a document sig- 

45 nature and said method may include the additional step 
of comparing said document signature against geomet- 
ric information of a signature known for an authorized 
signator of said signed document to determine whether 
said validation signature is a valid signature. 

50 The present invention relates to.a validation stamp 
that protects the integrity of a signature affixed to an 
electronic document. Specifically, the validation stamp 
protects against deceptions, relating to invalid copies 
and invalid signatures. 

55 In one embodiment, the validation stamp of the 
present invention protects signed documents compris- 
ing a document body and a document signature against 
invalid copies and invalid signatures. The validation 
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stamp is encrypted and includes a validation signature 
and a validation body, which is identical to the document 
body or portions thereof when created. The document 
signature and the validation signature are derived from 
an electronic signature captured using a graphics tablet, 5 
wherein the electronic signature is defined by geometric 
information and timing information. Specifically, the val- 
idation signature is derived using the timing information, 
and possibly the geometric information, associated with 
the electronic signature, and the document signature is 10 
derived using only the geometric information associated 
with the electronic signature. In a preferred embodiment 
of the present invention, the geometric information used 
to derive the document signature is'modlfled such that 
possible reconstruction of the timing information from '5 
the original geometric information is prevented. 

The integrity of the signature affixed to the electron- 
ic document is verified by decrypting the validation 
stamp and comparing the decrypted validation stamp 
and, in some Instances: the document signature against 20 
the document body and the geometric and timing infor- 
mation associated with a signature known for an author- 
ized signator. Specifically, the validation body is com- 
pared to the document body to determine whether the 
authorized signator originally intended to affix his or her 2S 
signature to the electronic document, and the geometric 
information and the timing information contained within 
the electronic document are compared to the geometric 
and timing information associated with the signature 
known for the authorized signator to determine whether 30 
the signature on the electronic document is a valid sig- 
nature. The signed document is a valid copy if the vali- 
dation body is identical to the document body or prede- 
termined portions thereof. The signature is a valid sig- 
nature if its geometric and timing information coincide 3S 
within a predetermined error distance of the geometric 
and timing information of the signature known for the 
authorized signator. 
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For a better understanding of the present invention, 
reference may be had to the following description of ex- 
emplary embodiments thereof, considered In conjunc- 
tion with the accompanying drawings, in which: -^^ 

Fig. 1 illustrates an electronic document E compris- 
ing a signed document D and a validation stamp V 
in accordance with the present invention; 
Fig. 2 illustrates a.flowchart depicting the steps of 50 
an exemplary validation routine for validating the 
electronic document Eof Fig. 1 ; 
Fig. 3 illustrates the flowchart of Fig. 3 having an 
additional step for verifying validation numbers; and 
Fig. 4 illustrates one embodiment of a signature ver- 5S 
ification system in connection with the present in-, 
vention. 



The present invention is a validation stamp that pro- 
tects the integrity of a signature on an electronic docu- 
ment. Specifically, the present invention protects 
against deceptions relating to Invalid copies and invalid 
signatures, as will be described herein. 

Referring to Fig. 1 . there is illustrated an electronic 
document E 02 comprising a signed document O04 and 
a validation stamp V06 in accordance with the present 
invention, i.e., E=(D,V). As shown in Fig. 1, the signed 
document D 04 is accessible to recipients of the elec- 
tronic document E 02. and includes a document body 
Bq 10 corisisting of textual and/or graphical information 
and a document signature 5^08 to indicate authorship 
or approval of the document body 10, i.e., D= (Sq, 
Bo)- 

The validation stamp V06 provides a mechanism 
for verifying the integrity of the document signature Sq 
08 in the signed document D 04, and includes a valida- 
tion signature Sy^ 1 2 and a validation body 1 4, which 
is the same as the document body Bq 10. Thus, V=(S^, 
By/) =(Sy, Bq) . In an alternate embodiment of the 
present invention, the validation body 14 contains 
predetermined portions or segments of the document 
body 10 in lieu of the entire document body Bq 10. 

Unlike the signed document D 04, the validation 
stamp V 06 Is encrypted using an encoding algorithm 
and is. therefore unaccessible to the recipients of the 
electronic document E 02. Encoding algorithms, such 
as the Digital Signature Algorithm (DSA) standard, are 
well-known In the art. See American National Standards 
Institute (ANSI), "Working Draft X9.30-1 99X: Public Key 
Cryptography Using Irreversible Algorithnns for the Fi- 
nancial Services Industry: Part I: The Digital Signature 
Algorithm (DSA)," American Bankers Association, 
Washington, D.C.. March 4. 1993, 

The document signature Sq 08 arid the validation 
signature S^^2 are derived from a signature captured 
by a device operable to electronically record the posi- 
tions of a writing- device, such as a pen. on the device 
at given times. Such devices are referred to herein as 
graphics tablets, and are well-known in the art. As would 
be understood, the term "graphics tablet" should not be 
construed to limit the present Invention in any manner 
in that other known methods of electronically capturing 
a signature may also be utilized. For the purposes of 
this application, signatures captured electronically using 
a graphics tablet are referred to herein as "electronic 
signatures," while signatures written with an ink pen on 
paper documents or captured electronically by a means 
other than a graphics tablet are referred to herein as 
"paper signatures." 

Electronic signatures have associated with them 
two types of information which the present invention uti- 
lizes to determine whether the integrity of a signature 
on an electronic document has been compromised: ge- 
ometric Information Sg and timing information The 
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geometric Information Sg describes the geometric sig- 
nature features, i.e.. shape of the signature, and is cap- 
tured by the graphics tablet as a sequence of points 
(pp..„pj. Each point has (x.y) coordinates. 

The timing information defines the moment each 
of the points (p^,...,p^are recorded electronically by the 
graphics tablet with reference to each other. Thus, for 
each point P/ comprising the geometric information S,of 
an electronic signature, there is associated a (x^y,) co- 
ordinate and a time fp i.e.. P/=(Vpy/,y- The timing infor- 
mation Sf is used to derive dynamic signature features 
of the signator, such as the motion or speed of a writing 
device as a signator writes each letter of his or her name 
on the graphics tablet. The dynamic signature features 
are not apparent from a copy of the signature. 

The geometric information and the timing infor- 
mation play somewhat complementary roles in distin- 
guishing genuine signatures from forgeries, i.e., the 
more forgers try to match every detail of a signature's 
shape, the less likely they are to match its dynamic sig- 
nature features, and vice-versa. In contrast to electronic 
signatures, paper signatures have associated geomet- 
ric information S^only, whereby the absence of the tim- 
ing information makes such signatures more vulnerable 
to forgery. 

The validation signature 12 is derived using the 
electronic signature and contains the timing information 
Sf and possibly, the geometric information Sg. In con- 
trast, the document signature Sp03, which is also de- 
rived using the electronic signature S, contains only the 
geometric information Sg - that is, the geometric Infor- 
mation Sg is isolated or the timing Information Sf Is re- 
moved from the electronic signature in order to create 
the document signature Sq. Thus, the document signa- 
ture Sq is equivalent to a paper signature. Since the doc- 
ument signature Sq contains only the geometric infor- 
mation Sg and the validation stamp V 06 is encrypted, 
the timing information is hidden from the recipients of 
the electronic document E 02, thereby preventing ac- 
cess to the dynamic signature features for imitation by 
a forger. 

The basic assumption that enables the success of 
the present invention is that the timing information S,is 
concealed. However, this may not be the case, for in- 
stance, if the graphics tablet samples the position of the 
writing device at regular time intervals In such a sit- 
uation, the timing information could be easily recon- 
structed from the geometric information Sousing the for- 
mula (A In order to hide the timing information 
S,and prevent its reconstruction from the geometric in- 
formation Sg, the geometric information (pp...,pj is 
modified before being recorded as the document signa- 
ture Sq. For example, the document signature S^) could 
be computed by simply re-sampling the raw geometric 
information (pp -,p„)to produce modified geometric in- 
formation (p},...,Pn) where adjacent points p] are equal 
arc-length distances from each other. Another example 
involves interpolating a random number of chosen 
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points between adjacent points of the raw geometric in- 
formation {pp .... p„). 

In general, signatures on electronic documents are 
subject to two forms of deception: invalid copy and 

s invalid signature. An invalid copy Is a signature that was 
actually produced by the authorized signator, i.e.. valid 
signature, for a document other than the one on which 
the signature is currently affixed. In other- words, the 
invalid copy of the signature Is not on the document 

10 which the authorized signator originally affixed his or her 
signature. For example, a valid signature may be "cut" 
from one electronic document and "pasted" onto a sec- 
ond electronic document. The second form of decep- 
tion, i.e., invalid signature, involves a forger attempting 
to imitate the geometric and/or dynamic signature fea- 
tures associated with a signature of another person. 
This signature is also affixed to a document not authored 
or approved by the authorized signator. 

The present invention electronic document E 02 is 

20 operable to resist both of the aforementioned forms of 
deception. In operation, an authorized signator or author 
A woujd create the electronic document E and send it 
to recipients R The recipients R would have access to 
the signed document D, but not to the encrypted valida- 
. 2S tion stamp V. To verify that the integrity of the signature 
on the electronic document was not compromised, the 
recipients /? would run a validation routine-which com- 
pares the validation body S^^and the geometric Informa- 
tion Sg and the timing information S^ contained within 

30 the electronic document against the signed document 
Dand the geometric and timing Information of a signa- 
ture known for the author A 

Referring to Fig. 2, there is illustrated a flowchart 
depicting the steps of an exemplary validation routine 

3S 20. As shown In Fig. 2, the validation routine 20. in step 
200. decrypts the validation stamp VXo access the en- 
crypted validation body By/ and the timing information 
and possibly the- geometric information Sg, corre- 
sponding to the encrypted validation signature S^. In 

40 step 21 0, the validation routine checks for the first form 
of deception. I.e., Invalid copy, by comparing the de- 
crypted validation body against the document body 
S^of the signed document D. If the decrypted validation 
body 8y coincides with the document body Bq, then the 

45 validation routine 20 concludes that the document sig- 
nature S0and the validation stamp V/was not "cut" from 
another electronic document E and "pasted" onto the 
electronic document E received — that is, the document 
signature Sq Is not an invalid copy. The validation rou- 

so tine 20 subsequently continues to step 220. Otherwise, 
the validation routine 20 proceeds to step 240 where the 
recipients /?are informed that the integrity of the docu- 
ment signature Sq on the electronic document E re- 
ceived has been compromised. 

ss In step 220, the validation routine 20 checks for the 
second form of deception, i.e., invalid signature, using 
a signature verification algorithm to validate the signa- 
ture on the electronic document. Signature verification 
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algorithms are well-known in the art. See "Statistical 
Methods for On-Line Signature Verification' by Winston 
Nelson. William Turin and Trevor Hastie in the Interna- 
tional Journal of Pattern Recognition and Artificial Intel- 
ligence. Volume 8, Number 3, 1994. In short, signature 
verification involves establishing statistical information . 
about a number of features of a given person's signa- 
ture, such as average time to write a signature, average 
speed of pen during signing, average number of strokes, 
etc. This statistical information is typically established 
during a training phase. To verify a particular instance 
of a signature, the signature verification algorithm meas- 
ures the features of interest and statistically tests wheth- 
er the results are similar within a predetermined error 
distance, such as Euclidean, to those obtained during 
the training phase. 

In other words, the signature verification algorithm 
compares the timing information S^of the decrypted val- 
idation signature S^^and the geometric information S^of 
the document signature (or decrypted validation sig- 
nature Sy) against those known for the authorized sig- 
nator A. If the geometric information Sg and the timing 
information S^are similar within the predetermined error 
distance of the known geometric information S^and the 
timing information of the authorized signator, then the 
decrypted validation signature is determined to be 
actually produced by the authorized signator A, i.e., val- 
id signature. The validation routine 20 subsequently 
continues to step 230 where it indicates to the recipients 
that the integrity of the document signature Sq on the 
electronic document E received has not been compro- 
mised. Otherwise, the validation routine 20 proceeds to 
step 240 where it indicates that the integrity of the doc- 
ument signature Sq on the electronic document E re- 
ceived has been compromised. 

In another.embodiment of the present invention, the 
validation stamp \/further includes a validation number 
A/ for providing additional protection against invalid sig- 
natures, wherein each validation number N comprises 
a sequence of characters which can be used to uniquely 
identify a person or other type of entity. Thus, if a forger 
is able to successfully imitate the geometric and dynam- 
ic signature features of another persons's signature, the 
forger must also know the authorized signator's associ- 
ated validation number N. Referring to Fig. 3. there is 
illustrated a flowchart depicting the steps of the valida- 
tion routine 20 having'a step 225 for verifying the vali- 
dation number N, In an alternate embodiment of the 
present invention, the validation number N is included 
in the validation stamp V\n lieu of the timing information 

Referring to Fig. 4, there is illustrated one embodi- 
ment of a signature verification system 40 in connection 
with the present invention. As shown in Fig. 4, the elec- 
tronic signature verification system 40 includes a com- 
puting device 42 for creating and verifying the electronic 
document E 02, a display 44 for providing a visual pres- 
entation, a keyboard 46 for providing typed input and a 
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graphics tablet 48 for providing handwritten input. The 
display 44. the keyboard 46 and the graphics tablet 48 
are electronically coupled to the computing means 42, 



Claims 

1 . A validation stamp for protecting the integrity of an 
electronic signature on a document, wherein said 

10 document includes a document body and a docu- 
ment signature, said document signature including 
geometric information corresponding to said elec- 
tronic signature, said validation stamp comprising: 

IS a validation signature including timing informa- 

tion corresponding to said electronic signature 
for ensuring that said electronic signature is a 
valid signature; and 

a validation body identical to at least a portion 
20 of said document body for determining whether 

said electronic signature was originally intend- 
ed for said document. 

2. A method for protecting an electronic signature af- 
2S fixed to an electronic document comprising the 

steps of: 

creating a signed document having a document 
body and a document signature; and 
30 assembling a validation stamp for said signed 

document, wherein said validation stamp in- 
cludes a validation signature and a validation 
body. 

35 3. The method of claim 2 comprising the additional 
step of: 

appending said validation stamp to said 
signed document, wherein said validation stamp 
may be referenced to protect the integrity of said 
40 electronic signature on said electronic document. 

4. The method of claim 2 or claim 3. wherein said doc- 
ument signature includes geometric information de- 
scribing geometric signature features of a signator 

45 of said electronic signature. 

5. The method of claim 4. wherein said geometric in- 
formation is modified such that timing information 
corresponding to said geometric information cannot 

so be reconstructed from modified geometric informa- 
tion. 

6. A method for verifying the integrity of an electronic 
signature on an electronic document having a 

ss signed document and an encrypted validation 
stamp, said method comprising the steps of: 

decrypting said validation stamp; and 
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comparing said validation stamp being decrypt- 
ed against said signed document to determine 
whether said electronic signature was originally 
intended by an authorized signator to be affixed 
to said electronic document. 



7. The method of claim 6. wherein said signed docu- 
ment includes a document body and said validation 
stamp includes a validation body, said step of com- 
paring said validation stamp includes: io 

comparing said validation body against said 
document body to determine whether said valida- 
tion body coincides with said document body. 

8. The method of claim 6 or claim 7. wherein said is 
signed document includes said document signature 
and said validation stamp includes a validation sig- 
nature, said method comprising the additional step 

of: 

comparing timing information of said vallda- 20 
tlon signature and geometric information of said 
document signature against geometric information 
and timing information of a signature known for an 
authorized signator to determine whether said elec- 
tronic signature is a valid signature. 25 

9. The method of claim 6 or 7, wherein said validation 
stamp includes a validation signature, said method 
comprising the additional step of; 

comparing geometric information and timing 30 
information of said validation signature against ge- 
ometric Information and timing information of a sig- 
nature known for an authorized signator to deter- 
mine whether said electronic signature is a valid sig- 
nature. 5^ 



10. A method for verifying the integrity of an electronic 
signature on an electronic document having a 
signed document and an encrypted validation sig- 
nature, said method comprising the steps of: 40 

decrypting said validation signature; and 
comparing said validation signature being de- 
crypted against timing information of a signa- 
ture known for an authorized signator of said 45 
signed document to determine whether said 
validation signature is a valid signature. 
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FIG. i 
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FIG. 2 
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